Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: 7ZEtj0opEmvO24igOI/yTU9qQRVqNn0Bvt7LcyqIdZk=
Subject key identifier: 6A:D8:B5:B9:16:44:CC:65:8A:2E:42:BF:B7:00:A4:F7:1D:D8:A0:14
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019FA9ABF4D6B8C847461CD34D1185DE7D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 1061
Signing time: Tue 28 Jul 2026 17:00:46 +0000
Manifest this update: Tue 28 Jul 2026 17:00:46 +0000
Manifest next update: Wed 29 Jul 2026 17:00:46 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: UFkS1np88lJSfO8kbDkVRMCZSbC4MTaznK5C38cp5O4=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:f4:d6:b8:c8:47:46:1c:d3:4d:11:85:de:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jul 28 17:00:46 2026 GMT
Not After : Jul 29 17:00:46 2026 GMT
Subject: CN=6ad8b5b91644cc658a2e42bfb700a4f71dd8a014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:36:66:96:7c:b3:d0:42:c4:9f:35:c6:a8:
45:21:77:1c:4d:d3:6a:a5:0c:11:5f:29:04:12:c5:
5f:f2:fe:97:25:51:6f:60:dd:60:3c:94:42:99:30:
71:6b:dd:9e:f3:d6:bb:64:36:59:48:43:51:7f:7d:
35:77:6d:4c:45:f1:f8:45:e0:54:23:94:40:dc:06:
32:f0:cb:be:82:fb:2c:88:84:6b:5c:57:17:6f:fb:
37:37:4d:3f:d6:a6:ca:63:09:c4:b2:ba:67:88:c0:
fa:bb:9d:f0:cb:69:df:b2:d4:fa:51:ad:0d:ed:fb:
4b:3e:5a:90:7c:3f:69:a7:4f:9f:3a:a5:13:85:60:
2c:44:ed:a7:db:2d:bc:a4:f7:91:96:a7:5e:e2:18:
f2:4e:24:c5:84:5e:7f:6d:ce:f0:3a:84:2e:96:22:
01:eb:89:c0:fc:78:85:95:3a:22:d1:6b:cd:86:45:
fd:d5:e0:99:d4:64:aa:e3:f2:87:4f:d8:a8:35:5f:
e9:1d:8c:43:6e:15:31:48:0a:17:62:c0:6f:dd:ba:
af:c7:7f:56:23:b0:ff:c3:95:10:1d:3e:f9:60:ff:
e2:3e:50:b6:c2:ab:b0:b8:a3:5c:0a:5b:25:52:8f:
db:ac:f8:d5:7c:2c:b3:8b:1f:39:48:25:38:95:98:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:B5:B9:16:44:CC:65:8A:2E:42:BF:B7:00:A4:F7:1D:D8:A0:14
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:b2:a4:92:7a:0b:21:c9:e5:3d:dd:77:89:29:f2:70:63:
4d:67:36:4f:55:1a:49:61:4d:c3:21:00:58:85:f7:17:8d:6b:
19:f0:68:41:8d:00:59:d3:79:58:cf:5c:2e:a1:e1:56:af:50:
e7:82:b5:22:5a:33:2f:5c:c9:e7:7c:84:67:9d:4f:60:5a:fb:
5f:79:64:ce:b8:de:f7:72:cb:12:c6:0f:13:f0:45:82:b3:61:
66:68:08:f4:40:91:33:e1:b4:40:08:c8:d2:2b:ab:d5:45:98:
8e:04:8e:3b:c0:07:90:0b:a0:24:b4:71:91:43:d7:40:7a:fd:
8b:5c:11:e6:5a:e4:60:cd:2b:d6:f5:51:ed:12:b7:83:a4:19:
15:d0:84:b6:a1:71:8a:ba:e7:13:e5:2e:5f:9a:75:bf:52:37:
eb:10:ff:88:db:1a:b6:3c:3a:9f:be:c2:81:d7:46:6c:e7:ca:
0b:1e:2c:9b:13:e2:86:db:4a:f7:41:51:f3:70:ed:53:e0:f6:
f1:5b:a9:d6:25:7f:db:27:aa:35:d4:34:cc:7e:83:f4:f6:54:
71:07:27:f8:9a:55:9c:f1:01:f4:6a:05:37:98:78:da:d4:6c:
72:6d:90:4f:b8:2c:4e:ab:1b:5e:1d:1c:c4:73:0f:b8:b6:6a:
8b:14:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:47 2026 by rpki-client